Privacy Policy (GDPR)

PRIVACY POLICY

In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), Actilab Biotecmen S.L. informs users of its personal data processing policy.

1. DATA CONTROLLER

Identity: Actilab Biotecmen S.L.
Tax ID (NIF): B21635347
Postal address: C/ Joaquina Santander, 11, 45600 Talavera de la Reina, Toledo, Spain
Email: marketing@biotecmen.es

2. PURPOSE OF PROCESSING

Personal data collected through the Website will be processed for the following purposes:

- Managing purchases made in the online store.
- Processing orders, shipments, billing, and returns.
- Sending commercial communications about products and offers, provided the user has given their consent.
- Handling inquiries, complaints, and customer service requests.
- Complying with legal obligations (tax, accounting, commercial).
- Preventing fraud and ensuring the security of the Website.

3. LAWFUL BASIS

The legal basis for data processing is:

- The execution of a sales contract (Art. 6.1.b GDPR).
- User consent for promotional purposes (Art. 6.1.a GDPR), which can be withdrawn at any time.
- Compliance with legal obligations (Art. 6.1.c GDPR).
- The legitimate interest of the Company for fraud prevention and service improvement (Art. 6.1.f GDPR).

4. CATEGORIES OF DATA PROCESSED

Identification data (first name, last name, ID/Tax number), contact details (address, email), billing and payment data, and browsing data (IP, cookies, site behavior).

No sensitive data or data from minors under 14 years of age are processed. Users must be of legal age or have the authorization of their legal representatives.

5. DATA RETENTION

- Customer data: during the commercial relationship and subsequent legal periods (minimum 6 years for tax and accounting obligations).
- Promotional data: until the user withdraws their consent.
- Browsing data: as provided in the Cookies Policy.

6. RECIPIENTS AND DISCLOSURES

Data may be communicated to:

- Technology service providers (Shopify Inc., hosting, payment gateways) acting as data processors.
- Transport and logistics companies for order delivery.
- Banking entities for the collection of purchases.
- Public administrations when there is a legal obligation.

Some providers may be located outside the European Economic Area. In such cases, international transfers are guaranteed through standard contractual clauses approved by the European Commission.

7. RIGHTS OF THE DATA SUBJECT

The user may exercise the following rights:

- Access to their data.
- Rectification of inaccurate data.
- Erasure (right to be forgotten).
- Restriction of processing.
- Data portability.
- Objection to processing.
- Withdrawal of consent.
- Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

To exercise these rights, send an email to marketing@biotecmen.es attaching a copy of your ID/NIE.

8. SECURITY MEASURES

The Company applies appropriate technical and organizational measures to ensure the security of personal data and prevent its loss, alteration, or unauthorized access.

9. MODIFICATIONS

This policy may be updated. Modifications will be published on the Website indicating the date of the last update.

Last updated: April 20, 2026